LEARNING PROGRESS
0%Across your learning path TRAINING ENVIRONMENT
SA
YOUR SECURITY OPERATIONS JOURNEY
Think like an analyst.
Respond like a defender.
Build practical SOC skills through structured lessons, real-world investigation scenarios and hands-on simulations.
SYSTEMS MONITORED 08
THREAT SIGNALANALYSIS READY
SOC / TRAINING NODE 01
LESSONS COMPLETED
0 / 36Keep building your foundationLAB INVESTIGATIONS
0Incidents you've investigatedKNOWLEDGE SCORE
— / 100Based on your lesson quizzesYOUR NEXT MOVE
Pick up where you left off
01FOUNDATIONS
FREE MODULEBEGINNER · 3 LESSONS
Cybersecurity Fundamentals
Understand the security landscape, core concepts and how a SOC protects an organisation.
0 of 3 lessons complete
LEARN BY DOING
Step inside the SOC
Practice the decisions real analysts make — in a safe, simulated environment.
CYVANTA // SECURITY OPERATIONS● SIMULATED
10:42:08[HIGH] Multiple failed logins detected
10:42:11[MED] Suspicious PowerShell execution
10:42:15[HIGH] Unusual outbound connection
10:42:19[INFO] Correlation engine ready
YOUR VIRTUAL SOC
Alerts don't investigate themselves.
Review security events, connect evidence, classify incidents and choose the right response.
THE LEARNING PATH
Build your SOC foundation.
12 structured modules. From your first security concept to investigating complex incidents. Learn at your own pace.
12MODULES
36+LESSONS
1FREE MODULE
₹499ONE-TIME ACCESS
CYVANTA RANGE / SOC ENVIRONMENT
Welcome to the operations floor.
Investigate fictional security telemetry. Every alert is a learning opportunity.
CYVANTASECURITY OPERATIONS CENTER
OPEN ALERTS3
INVESTIGATED0
CRITICAL / HIGH2
ENVIRONMENTHEALTHY
DETECTION QUEUE
Security alerts 3
ⓘ All alerts are fictional training data.
⌖
Select an alert to investigate
Choose an alert from the detection queue to review its details, inspect evidence and make an analyst decision.
ANALYST TOOLKIT / SIMULATED TELEMETRY
Investigation workbench
Pivot between log search, endpoint telemetry, Windows events and incident case notes.
SIMULATED SPLUNK-STYLE SEARCH
Use the training query language to search the fictional event dataset. This is a teaching parser, not a live Splunk connection.
ENDPOINTS04
ACTIVE DETECTIONS02
ISOLATED (SIMULATED)00
ENDPOINT INVENTORY
PROCESS TREE / DEV-WS-15
Example endpoint process ancestry. Select an endpoint to load its training process tree.
explorer.exe (PID 4120)
└─ chrome.exe (PID 5228)
└─ updater.exe (PID 6092)
└─ powershell.exe (PID 7316) [REVIEW]
Isolation is a fictional action recorded only in this browser session.
WINDOWS SECURITY & SYSMON EVENT VIEWER
Filter common event IDs and inspect the fields an L1 analyst should understand.
Training notes: 4624 = successful logon; 4625 = failed logon; 4688 = process creation (when enabled); 4104 = PowerShell script block logging; Sysmon 1 = process creation, 3 = network connection, 10 = process access. Event meaning depends on audit configuration and context.
INVESTIGATION REGISTER
Submitted decisions, analyst notes and training scores are stored locally in this browser.
ANALYST SCORECARD
—AVG SCORE / 100
—DECISION ACCURACY
0CASES REVIEWED
Scores reward a correct classification and evidence-based notes. Use the feedback to improve your next investigation.
CYVANTA RANGE / SCENARIO ENGINE
Attack scenario engine
Investigate a connected, fictional attack across SIEM, endpoint, Windows and network evidence.
SCENARIO01
DIFFICULTYBEGINNER
INVESTIGATION SCORE—
Scenario briefing
INVESTIGATION WORKFLOW / COLLECT EVIDENCE
Inspect all four consoles to build the incident timeline. Evidence is revealed as you investigate.
DISCOVERED ATTACK TIMELINE / SIMULATED UTC
CORRELATED EVIDENCE
Training only: all identities, domains, IP addresses and telemetry are fictional. No real systems are contacted or changed.
⚠ TRAINING SIMULATION — No real endpoints, accounts, networks or security systems are connected. Response actions only affect this local exercise.
INTERVIEW ARENA
Prepare to explain your thinking.
Interview practice and question banks are part of the next release. For now, use the learning path's interview checkpoints.
Interview arena is being built.
We'll add technical questions, scenario-based rounds, model answers and timed practice.